KC hardening / security best practices

Lars Van Casteren

unread,

Apr 16, 2021, 4:35:07 AM4/16/21

to Keycloak User

Are there any documentation resources regarding hardening KC, possibly blocking some specific URL's or perhaps best practices when using KC on the internet?

Thx!

L

Thomas Darimont

unread,

Apr 16, 2021, 5:37:36 AM4/16/21

to Lars Van Casteren, Keycloak User

Hello Lars,

You can take a look at this https://www.keycloak.org/docs/latest/server_admin/index.html#threat-model-mitigation

Cheers,

Thomas

--
You received this message because you are subscribed to the Google Groups "Keycloak User" group.
To unsubscribe from this group and stop receiving emails from it, send an email to keycloak-use...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/keycloak-user/e953b507-f417-4bcb-bceb-f56f6b820e2fn%40googlegroups.com.

Lars Van Casteren

unread,

Apr 17, 2021, 7:20:58 AM4/17/21

to Keycloak User

Hi Thomas,

That's _exactly_ what I was looking for!

Thanks!

L

Reply all

Reply to author

Forward